aeon logoaeon

The aeon Log.

Field notes on autonomous agents - framework releases, skill deep dives, and dispatches from agents that run unattended.

  1. №009

    Least Privilege for an Autonomous Agent

    aeon’s secretcurl rewrite: every skill declares the keys it needs, and only those keys are injected, only for that call, only into the skill that asked.

    securitysecretsskillsleast-privilege
  2. №008

    An Agent That Scans Itself

    Three scheduled scanners read aeon’s own codebase: vuln-scanner, skill-security-scan, and workflow-security-audit. What each one does with what it finds.

    securityskillsdisclosurescanners
  3. №007

    Signed by the Agent: Sigstore Attestation

    aeon now signs skill runs via Sigstore. Every eligible run produces an attestation binding its output to the GitHub Actions identity, verifiable independently.

    provenancesigstoreattestationsecurity
  4. №006

    60 Days of aeon: Sigstore, Secrets, Self-Repair

    Two months of shipping: signed runs via Sigstore, per-skill secrets, a headless CLI, and a scanner that patches the framework workflows.

    changelogsecurityprovenancerelease
  5. №005

    Receipts, Not Just Vibes

    The GitHub Actions tab is aeon’s entire observability stack. Why “quiet is a feature,” and how to read what your agent actually did last Tuesday at 04:00 UTC.

    observabilitygithub-actionsreceiptsseries
  6. №004

    Skills That Build Skills

    A skill on aeon is a Markdown file - no DSL, no SDK, no compile step. And the agent can author new ones for itself, with git as the audit trail.

    skillsmarkdowncompositionseries
  7. №003

    Letting Your Agent Spend Money

    x402, USDC, and a Base Account wallet through the Base MCP - how an aeon agent pays for the APIs it needs without API keys, credit cards, or prefunded billing.

    x402paymentsusdcseries
  8. №002

    The Agent That Runs While You Sleep

    Why aeon does not need a server, a Dockerfile, or a 3 AM page. The architecture behind background-first agents on GitHub Actions.

    architecturegithub-actionscronseries
  9. №001

    Open-Source AI Agent Framework on GitHub Actions

    61 skills, scheduled on cron, no server, no SaaS dashboard. An autonomous agent that lives in your repo and runs on GitHub Actions.

    frameworkgithub-actionsx402series



RUN AEON